react-cve-2025-55182

fix-react2shell A CLI tool to detect and fix the critical CVE-2025-55182 React2Shell vulnerability in React Server Components and Next.js applications. The Vulnerability CVE-2025-55182 is a critical CVSS 10.0 unauthenticated remote code execution vulnerability affecting: React Server DOM packages...

CVE-2019-5420

CVE-2019-5420 Ruby-on-Rails offers three different environments it can run in: development, test and production. You should obviously not have code running in development or test available on the internet but it as always happens for example in staging environments. Ruby-on-Rails uses...

CVE-2024-32002-hook

CVE-2024-32002-hook CVE-2024-32002-hook...

CVE-2024-50379

CVE-2024-50379 CVE-2024-50379 is a critical security vulnerability affecting Apache Tomcat, allowing attackers to exploit misconfigurations or weaknesses to achieve remote code execution RCE. When exploited, this vulnerability can lead to server compromise, data leakage, or privilege escalation...

CVE-2025-55182

🚨 CVE-2025-55182 — React2Shell CVE-2025-55182 is a critical Remote Code Execution RCE vulnerability affecting React Server Components RSC. 📌 Overview This vulnerability allows unauthenticated attackers to execute arbitrary code on vulnerable servers. The issue originates from unsafe deserializati...

CVE-2021-41773-L-

CVE-2021-41773 🐛 Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like...

CVE-2022-47986

CVE-2022-47986 Aspera Faspex Pre Auth RCE https://blog.assetnote.io/2023/02/02/pre-auth-rce-aspera-faspex/ Poc Usage: python3 poc.py https://xxxxx whoami...

CVE-2022-43571

CVE-2022-43571 CVE-2022-43571 Splunk RCE – my personal journey to color your life Only because I got the statement from my IT, there are no reasons for a SPLUNK update, I analyzed this vulnerability CVE-2022-43571 to prove the opposite for a remote code execution. Here is my exploit. If I had fou...

CVE-2021-22911

Updated exploit for CVE-2021-22911 Rocket.Chat 3.12.1 - NoSQL Injection to RCE Unauthenticated original credits to : https://www.exploit-db.com/exploits/50108 Setup Create python virtual environment and install deps $ python -m venv venv $ source venv/bin/activate $ pip install requests oathtool...

nmap-scripts

nmap-scripts nmap scripts for vuln cve-2020-0796 & cve-2019-7238 & cve2019-11580 & cve2017-6327 CVE-2020-0796 A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 SMBv3 protocol handles certain requests, aka 'Windows SMBv3 Client/Server Remote Code...

Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Shell Bug

Microsoft on Tuesday shattered its own Patch Tuesday record by shipping patches for a whopping 1,413 vulnerabilities, including one that it said has come under active exploitation. These include 1,102 flaws in Windows, 134 in Office, 61 in Developer Tools, 36 in SharePoint Server, and 22 in SQL...

CVE-2021-40444-Microsoft-Office-Word-Remote-Code-Execution-

CVE-2021-40444-Microsoft-Office-Word-Remote-Code-Execution-...

cve-2021-42013-httpd

Dockerisation of a Vulnerability: cve-2021-42013 This project aims to dockerize a specific vulnerability using Docker. The goal is to create an isolated environment in which the vulnerability can be exploited and tested securely. Vulnerable Application Apache HTTP Server 2.4.50 - Remote Code...

Exploit-CVE-2024-23897

Exploit-CVE-2024-23897 Run the Container docker run -p 8080:8080 --name vulnerable-jenkins -d jenkins/jenkins:2.441-jdk17 Check logs docker logs Fetch docker machines IP: docker inspect vulnerable-jenkins | grep IPAddress Exploitation Code: python3 exploit.py --target http://127.0.0.1:8080 --file...

CVE-2025-61882-CVE-2025-61884

CVE-2025-61882 & CVE-2025-61884 EDIT: Oracle just disclosed a new vulnerability CVE-2025-61884, the detection script for that vuln can be found in this repo or originally here:https://gist.github.com/rxerium/6c70bc6b72fc0d1365c85937d35d9550. As quoted from Oracle's security advisory: This Securit...

CVE-2026-87855

The JTL-Connector for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.4.3 via the saveImage function. This is due to the startSession function accepting an empty jtlauth parameter as a valid credential, combined with insufficient fil...

CVE-2026-104800

The AGE-GATE plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.0 via the 'width and height' parameter parameter. This is due to missing authentication, capability checks, and nonce verification on the standalone admin.php endpoint, combined with...

CVE-2025-55182-VulnCheckPOC

CVE-2025-55182 Vulnerability Check PoC Proof-of-concept scanner for detecting React Server Components RSC vulnerability in Next.js applications CVE-2025-55182. Usage This is only a check to see if a server is vulnerable, based on this release by Searchlight Cyber...

CVE-2025-69458

CVE-2025-69458 – Movie Rating System 1.0 SQLi to RCE Unauthenticated WriteUp CVE-2025-69458 – ExploitDB 50622...

CVE-2021-41805

CVE-2021-41805 Hashicorp Consul RCE via API HashiCorp Consul Enterprise before 1.8.17, 1.9.x before 1.9.11, and 1.10.x before 1.10.4 has Incorrect Access Control. An ACL token with the default operator:write permissions in one namespace can be used for unintended privilege escalation in a differe...